41554 blogs · 4,450,554 posts Claim your blog

Record · corpus.blog/posts/01a0c563-e61a-731a-b6ce-56da37eba91b

5 big mistakes beginners make hacking APIs

danaepp.com · published 25 October 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at danaepp.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 18
Words captured: 2,310

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/OWASP/API-Security/blob/master/2019/en/src/0xa9-improper-assets-management.md

github.com

https://github.com/OWASP/API-Security/blob/master/2019/en/src/0xa6-mass-assignment.md

github.com

Automate your API hacking with Autorize Read at the source ↗

How to find access control issues in APIs Read at the source ↗

https://github.com/danielmiessler/SecLists/blob/master/Discovery/Web-Content/swagger.txt

github.com

https://apis.guru/

apis.guru

https://www.postman.com/explore/apis

postman.com

https://www.programmableweb.com/apis/directory

programmableweb.com

https://github.com/public-apis/public-apis

github.com

https://rapidapi.com/search/

rapidapi.com

https://app.swaggerhub.com/

app.swaggerhub.com

How to craft rogue API docs for a target when they don’t exist Read at the source ↗

https://github.com/epi052/feroxbuster

github.com

https://obsidian.md/

obsidian.md

https://pandoc.org/

pandoc.org

https://cheatsheetseries.owasp.org/cheatsheets/Mass_Assignment_Cheat_Sheet.html

cheatsheetseries.owasp.org

The Bug Bounty Dilemma: When to give up on an API target Read at the source ↗

API Security Testing: How to Use OWASP guidance as your blueprint Read at the source ↗